Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a383030303a3a2f33332d3333203d3e20323639343333.roa
File: 323830343a363438383a383030303a3a2f33332d3333203d3e20323639343333.roa (raw, json)
Hash identifier: 96zVryhJDPUfSBbtjDV4HKuTjLVJlDiq+qsTAmoL/3M=
Subject key identifier: 58:F3:01:E1:E7:CE:F5:E0:F4:25:27:04:B3:3D:71:93:20:70:F2:A8
Certificate issuer: /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial: 5D3DA6C6A26498EA81139D3555776275A26348F7
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a383030303a3a2f33332d3333203d3e20323639343333.roa
Signing time: Thu 04 Apr 2024 23:51:24 +0000
ROA not before: Thu 04 Apr 2024 23:46:24 +0000
ROA not after: Thu 03 Apr 2025 23:51:24 +0000
asID: 269433
IP address blocks: 2804:6488:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:3d:a6:c6:a2:64:98:ea:81:13:9d:35:55:77:62:75:a2:63:48:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Validity
Not Before: Apr 4 23:46:24 2024 GMT
Not After : Apr 3 23:51:24 2025 GMT
Subject: CN=58F301E1E7CEF5E0F4252704B33D71932070F2A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:9c:81:39:5d:93:ad:91:58:26:e3:b6:e9:
30:00:6d:28:70:1f:c8:88:ee:38:42:6e:18:a2:38:
52:d9:b3:52:3a:da:f5:28:58:ac:b6:72:9f:33:f6:
90:92:e7:1b:fb:e0:67:1b:b4:57:8f:a4:7a:3b:93:
e8:96:d7:14:41:23:9e:a6:ad:50:ca:ba:01:bb:0d:
dc:64:b6:5a:72:59:df:41:75:15:0e:9c:06:fd:92:
9c:0f:64:a0:3e:e4:20:0c:33:c2:bc:b0:08:03:71:
9a:95:61:5c:49:d6:0f:18:c1:04:87:40:e5:2e:14:
75:41:68:8c:be:e2:90:bb:5a:94:23:39:d3:e8:d4:
df:51:a6:9b:26:88:dd:7e:66:10:2c:d8:e1:1a:19:
9a:7a:79:0b:f2:3f:4f:1c:47:39:cc:9f:0c:9c:ef:
45:9f:72:39:52:2d:2b:d2:e9:3f:e0:0f:47:e8:c0:
15:75:19:11:0c:3a:ce:4a:c2:7f:f6:43:c5:c2:eb:
9d:e5:61:f6:76:bf:eb:62:d7:9f:9a:1f:85:5c:ce:
66:ff:b2:a5:06:49:8b:41:c4:f4:c7:09:d8:82:ce:
fa:ee:d8:6a:e8:4c:3e:a0:44:90:26:dd:82:16:28:
b4:b0:c4:48:35:30:04:70:65:74:bf:08:39:00:d0:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:01:E1:E7:CE:F5:E0:F4:25:27:04:B3:3D:71:93:20:70:F2:A8
X509v3 Authority Key Identifier:
keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a383030303a3a2f33332d3333203d3e20323639343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6488:8000::/33
Signature Algorithm: sha256WithRSAEncryption
60:df:ad:36:50:ef:d2:0d:66:30:ee:6e:93:e6:8a:03:2e:e0:
5f:d2:ba:ec:f4:49:21:21:6f:3a:96:68:c2:91:c8:07:72:a3:
1b:18:8d:5c:ca:79:97:c6:51:a8:33:6b:be:42:36:93:02:25:
d8:27:3f:fa:b8:7d:17:b0:c3:49:b6:3e:b1:06:ba:1d:02:1d:
a2:83:30:8f:4b:e0:ac:3e:31:c6:26:e7:f0:3e:98:97:f2:98:
33:07:dc:7a:5f:40:9d:ad:8f:3a:a3:77:f7:20:1a:be:3e:0c:
0f:1e:14:f4:f2:b4:f2:5f:7d:d4:a4:02:49:7e:b4:20:d3:96:
01:22:bb:57:0c:82:2c:ae:fb:02:38:59:3c:3b:24:b4:3c:92:
7b:bd:66:b7:21:1a:e5:03:d3:53:d3:15:ba:6a:16:62:92:38:
e6:aa:e8:cd:d5:76:9e:32:63:23:71:3d:da:18:db:c9:cc:e7:
a5:56:b4:a7:70:12:d6:56:05:df:5e:b9:cd:33:07:11:7d:60:
32:3d:48:b7:ee:d2:c0:8f:de:cb:1c:47:56:39:78:9d:f6:4d:
f7:2f:78:56:6d:e8:18:5e:02:45:0a:e0:dc:d6:d5:ca:0c:51:
2e:82:d7:85:8c:d6:39:77:f6:c2:4f:e3:4c:a9:8c:c8:fa:03:
d1:99:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:35 2025 by rpki-client